siteplane 0.1.54 → 0.1.56

package/README.md

@@ -1,6 +1,6 @@
 # siteplane
 
-**Unreleased image-policy preparation:** When the scan includes image fields, `withSiteplane` prepares
+**Image-policy preparation:** When the scan includes image fields, `withSiteplane` prepares
 Next Image and existing Next-config CSP headers for Siteplane's image route and your website's
 `/siteplane-assets/` path. Existing image sources stay in place. Local builds require the same public HTTPS
 `SITEPLANE_SITE_ORIGIN` supplied by `setup deploy`. Custom loaders and explicit redirect settings need
@@ -19,7 +19,7 @@ they choose **Open review** in their own browser. Do not consume the link on the
 Issue a fresh link only when needed. The URL fragment is a short-lived credential, so do not
 write it to source, documentation, analytics or shared logs. Guest review can organize and finish
 the setup; activation and account ownership require the later claim step. This entry remains
-controlled while Batch 3 is being completed.
+controlled by the existing beta and launch gates.
 
 ### Controlled claim confirmation
 
@@ -88,24 +88,27 @@ preserves the Site, Run, runtime key, revalidation generation, selected fields a
 Completed setup credentials remain closed. Known package/workspace/provider conflicts are diagnosed before
 writes; support ranges do not trigger automatic framework or package-manager upgrades.
 
-## Controlled accountless start
+## Accountless start
 
-The T8 candidate includes `setup start`; the hosted endpoint is closed by default until Batch 3 acceptance.
-Use only the exact candidate version provided for an enabled environment and an explicit user request:
+Use `setup start` for an explicit user request to integrate a website before creating an account.
+Save the user's exact editing instructions in a text file and pass `--instructions-file`; inline
+`--instructions` is not supported. Omit the file only when the user asks the agent to choose.
 
 Before starting, add `.siteplane/credentials.json` to the repository’s `.gitignore`. Start rejects tracked or
 unprotected credentials before any provisioning request.
 
 ```bash
-npx -y siteplane@0.1.51 setup start --modules editing --instructions-file instructions.txt
-npx -y siteplane@0.1.51 setup context
+npx -y siteplane@0.1.55 setup start --modules editing --instructions-file instructions.txt
+npx -y siteplane@0.1.55 setup context
 ```
 
 Start performs read-only preflight and saves the installation key and original request privately before the
 first provisioning call. Select `editing,analytics` only when explicitly requested. Retry in the same directory
 with the same request after interruption; configuration without credentials produces a diagnosis, never a silent
-replacement project. The returned task carries the provisional assignment and deadline. Guest review and claim
-remain later Batch 3 work; this entry grants no publication or measurement activation.
+replacement project. The returned task carries the provisional assignment and deadline. After verification,
+`setup review` opens the saved guest review. The user can create an account or sign in from that review;
+inspect and confirm only their concrete claim request in this repository. Claim preserves the review and
+returns it to the owner's account; it does not activate editing or analytics.
 
 ## Approved fields
 

package/dist/bin/siteplane.js

@@ -1409,9 +1409,17 @@ var editorSectionSchema = z16.object({
 });
 var editorRouteSchema = z16.object({
   routeKey: siteFieldRouteKeySchema,
+  previewPath: z16.string().trim().refine((path) => path.startsWith("/") && !path.startsWith("//") && !/[\\\[\]?#\s]/u.test(path) && (path === "/" || !path.endsWith("/")), "previewPath must be a concrete same-site path, for example /services/consultation.").optional(),
   label: z16.string().trim().min(1),
   sections: z16.array(editorSectionSchema).min(1)
 }).strict().superRefine((route, context) => {
+  if (route.routeKey.includes("[") && !route.previewPath) {
+    context.addIssue({
+      code: "custom",
+      path: ["previewPath"],
+      message: "Dynamic editor routes need a previewPath for an existing page; keep the canonical routeKey unchanged."
+    });
+  }
   const sections = /* @__PURE__ */ new Set();
   for (const [index, section] of route.sections.entries()) {
     if (sections.has(section.label)) {
@@ -4352,6 +4360,14 @@ function scanNextSourceFilesToSiteFieldContract(files, options) {
   const fields = [];
   for (const field of uniqueFields(scan.fields)) {
     const routeKey = field.technicalRouteKey ?? field.routeHint;
+    if (routeKey === "/*") {
+      scan.warnings.push({
+        code: "field_scan.global_route_key_invalid",
+        message: `Field ${field.fieldId} uses /* as its routeKey. Use $global in both the value call and DOM attrs for content shared across routes; /* cannot produce matching editor evidence. This affects the editor integration, not the website build.`,
+        fieldId: field.fieldId,
+        filePath: field.sourceFilePath ?? "unknown"
+      });
+    }
     if (!routeKey) {
       scan.hardErrors.push({
         code: "field_scan.route_key_missing",
@@ -6592,6 +6608,17 @@ async function runSetupCommand(args, dependencies) {
     dependencies.env
   );
   if (area === "start") {
+    const usage = "Usage: siteplane setup start [--modules editing,analytics] [--instructions-file <path>] [--api-base-url <url>]";
+    if (areaArgs.includes("--help") || areaArgs.includes("-h")) {
+      dependencies.stdout(usage);
+      dependencies.stdout("Save the user's exact editing instructions in a text file and pass --instructions-file. Omit it only when the user asks the agent to choose.");
+      return { exitCode: 0 };
+    }
+    const options = /* @__PURE__ */ new Set(["--modules", "--instructions-file", "--api-base-url"]);
+    for (let index = 0; index < areaArgs.length; index += 2) {
+      if (!options.has(areaArgs[index]) || !areaArgs[index + 1] || areaArgs[index + 1].startsWith("--"))
+        throw new Error(`Invalid setup start option. ${usage}. User instructions require --instructions-file.`);
+    }
     const instructionsFile = readOption(areaArgs, "--instructions-file");
     const modules = readOption(areaArgs, "--modules");
     const result2 = await dependencies.commands.setupStartCommand({

package/dist/index.js

@@ -1137,9 +1137,17 @@ var editorSectionSchema = z16.object({
 });
 var editorRouteSchema = z16.object({
   routeKey: siteFieldRouteKeySchema,
+  previewPath: z16.string().trim().refine((path) => path.startsWith("/") && !path.startsWith("//") && !/[\\\[\]?#\s]/u.test(path) && (path === "/" || !path.endsWith("/")), "previewPath must be a concrete same-site path, for example /services/consultation.").optional(),
   label: z16.string().trim().min(1),
   sections: z16.array(editorSectionSchema).min(1)
 }).strict().superRefine((route, context) => {
+  if (route.routeKey.includes("[") && !route.previewPath) {
+    context.addIssue({
+      code: "custom",
+      path: ["previewPath"],
+      message: "Dynamic editor routes need a previewPath for an existing page; keep the canonical routeKey unchanged."
+    });
+  }
   const sections = /* @__PURE__ */ new Set();
   for (const [index, section] of route.sections.entries()) {
     if (sections.has(section.label)) {

package/dist/next.js

@@ -1340,9 +1340,17 @@ var editorSectionSchema = z16.object({
 });
 var editorRouteSchema = z16.object({
   routeKey: siteFieldRouteKeySchema,
+  previewPath: z16.string().trim().refine((path) => path.startsWith("/") && !path.startsWith("//") && !/[\\\[\]?#\s]/u.test(path) && (path === "/" || !path.endsWith("/")), "previewPath must be a concrete same-site path, for example /services/consultation.").optional(),
   label: z16.string().trim().min(1),
   sections: z16.array(editorSectionSchema).min(1)
 }).strict().superRefine((route, context) => {
+  if (route.routeKey.includes("[") && !route.previewPath) {
+    context.addIssue({
+      code: "custom",
+      path: ["previewPath"],
+      message: "Dynamic editor routes need a previewPath for an existing page; keep the canonical routeKey unchanged."
+    });
+  }
   const sections = /* @__PURE__ */ new Set();
   for (const [index, section] of route.sections.entries()) {
     if (sections.has(section.label)) {
@@ -3086,6 +3094,14 @@ function scanNextSourceFilesToSiteFieldContract(files, options) {
   const fields = [];
   for (const field of uniqueFields(scan.fields)) {
     const routeKey = field.technicalRouteKey ?? field.routeHint;
+    if (routeKey === "/*") {
+      scan.warnings.push({
+        code: "field_scan.global_route_key_invalid",
+        message: `Field ${field.fieldId} uses /* as its routeKey. Use $global in both the value call and DOM attrs for content shared across routes; /* cannot produce matching editor evidence. This affects the editor integration, not the website build.`,
+        fieldId: field.fieldId,
+        filePath: field.sourceFilePath ?? "unknown"
+      });
+    }
     if (!routeKey) {
       scan.hardErrors.push({
         code: "field_scan.route_key_missing",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "siteplane",
   "private": false,
-  "version": "0.1.54",
+  "version": "0.1.56",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
   "publishConfig": {